#3 Gotta use the rijndael encryption.  More info about the problem with cipher encryption: http://stackoverflow.com/questions/3050253/cakephp-1-3-0-cookie-value-not-decrypting
Whitespaces in UsersController fixed.